This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a343030303a3a2f33382d3338203d3e20323637323536.roa
File:                     323830343a346161633a343030303a3a2f33382d3338203d3e20323637323536.roa (raw, json)
Hash identifier:          GgyOFEhJygmKT7WpT2rNoIlbKcJ9ziRTz3EbzAJEqRs=
Subject key identifier:   63:30:1F:8A:AD:5D:2E:DB:A9:B2:4A:83:10:F3:A8:5D:9D:3A:F7:06
Certificate issuer:       /CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
Certificate serial:       2BB438CD2F9A7DBD593962DE761A042350AFA2D1
Authority key identifier: 93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a343030303a3a2f33382d3338203d3e20323637323536.roa
Signing time:             Wed 03 Dec 2025 19:04:08 +0000
ROA not before:           Wed 03 Dec 2025 18:59:08 +0000
ROA not after:            Wed 02 Dec 2026 19:04:08 +0000
asID:                     267256
IP address blocks:        2804:4aac:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b4:38:cd:2f:9a:7d:bd:59:39:62:de:76:1a:04:23:50:af:a2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
        Validity
            Not Before: Dec  3 18:59:08 2025 GMT
            Not After : Dec  2 19:04:08 2026 GMT
        Subject: CN=63301F8AAD5D2EDBA9B24A8310F3A85D9D3AF706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:4a:85:2d:71:f6:29:60:25:54:92:03:85:
                    73:3a:91:31:32:2d:cd:ec:f4:2c:1f:45:e9:76:30:
                    14:2d:6a:e5:45:37:f7:75:8d:58:ce:d6:77:40:a8:
                    4a:bd:08:9b:6a:a6:64:0b:ff:d1:67:ed:c3:49:2f:
                    7d:b8:01:45:c1:5a:67:25:ba:30:87:35:78:64:60:
                    4e:35:bd:15:89:37:fc:de:b8:53:43:d9:ae:08:43:
                    1d:64:30:45:06:59:e8:a2:91:04:2c:54:29:7c:dd:
                    ee:d8:11:7f:30:3e:29:5f:b7:97:28:10:75:bc:31:
                    72:e4:e3:a0:e2:37:9d:c9:86:22:a1:0c:e7:ed:7d:
                    95:05:bc:31:68:e3:18:e3:84:8c:2c:86:1b:a7:a1:
                    64:a1:8a:00:da:76:ff:77:14:ac:87:5c:bf:c9:c3:
                    94:86:ad:6e:41:ab:ab:f7:21:d7:49:cb:af:18:ed:
                    21:94:d0:76:3e:a3:f3:08:a0:09:90:5c:45:38:5e:
                    f4:60:03:12:ee:d0:1b:82:c9:0c:b6:68:4e:31:99:
                    98:9b:93:a8:c8:84:7e:f5:88:1f:ec:e9:d3:9a:00:
                    aa:45:9e:5a:55:69:52:44:5b:d5:9b:c8:3b:d9:cf:
                    d1:e9:92:5d:2b:41:95:db:47:ec:27:fb:3c:42:7d:
                    e3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:30:1F:8A:AD:5D:2E:DB:A9:B2:4A:83:10:F3:A8:5D:9D:3A:F7:06
            X509v3 Authority Key Identifier:
                keyid:93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a343030303a3a2f33382d3338203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4aac:4000::/38

    Signature Algorithm: sha256WithRSAEncryption
         55:4a:ee:e3:2e:3b:22:6a:92:d4:78:f6:b7:57:ca:07:58:7e:
         13:6c:86:04:32:99:46:76:1b:69:05:b2:47:67:ce:14:57:67:
         e4:58:7d:5a:e4:24:12:07:51:af:75:e4:38:21:01:3a:26:f6:
         26:d0:b4:d1:85:07:77:c9:29:2d:1a:b0:5d:f3:df:9c:64:fb:
         23:6b:a3:d0:98:e7:89:88:40:44:72:b6:41:36:69:60:05:f3:
         a0:1b:68:92:cf:35:f6:03:66:c1:cd:0b:5c:ff:53:f5:98:68:
         9e:aa:ab:62:1c:e2:13:04:51:43:74:87:19:25:3b:5f:1b:4c:
         91:4e:16:15:9e:9d:36:70:a0:57:f6:8a:ed:67:0a:d0:e7:c8:
         a5:7a:6b:1c:7c:eb:c1:7f:04:40:7d:ec:6d:5f:52:53:72:03:
         d0:6e:ee:5b:18:ec:e8:2e:d9:fd:d0:1b:20:0c:72:cf:02:c7:
         bb:9d:3a:68:ef:ae:fd:7b:60:fa:25:32:2b:38:1f:c9:1f:15:
         4a:bc:15:e9:ee:57:ad:b9:20:42:71:a2:21:a5:79:4d:51:0f:
         10:61:61:94:4c:14:b0:ac:cc:12:16:3b:96:0a:18:05:b0:5c:
         2f:29:84:74:24:03:87:76:0a:81:e7:f6:53:ca:62:03:c6:ec:
         a8:85:3a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:17:33 2025 by rpki-client